Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest Blogs

Vanta's progress on its pledge to CISA's Secure by Design Initiative

Vanta’s mission is to secure the internet and protect consumer data. Following the launch of the U.S. Cybersecurity and Infrastructure Security Agency (CISA)’s Secure by Design pledge on May 8, 2024, Vanta continues to reinforce our commitment to our mission daily as one of the first organizations to adopt CISA’s Secure by Design pledge. ‍ This pledge simplifies the implementation of best security practices for software companies—raising the bar for protecting customer data.

Bringing Veracode Fix to GitHub

If you’re an avid reader of Application Security surveys, analyst papers, or incident reports, you may have concluded that the biggest issue most organizations have with application security is NOT finding the flaws in their codebase, but is, in fact, finding ways to remediate them while also creating new applications and updates, oh and keeping the lights on. Many organizations are drowning in security debt.

Identity Under Siege: Responding to the National Public Data Breach

While the scale of this data breach is alarming – with 277 gigabytes of data reportedly stolen – it’s important not to panic. Instead, focus on taking concrete steps to protect yourself. Stay informed, be proactive in safeguarding your personal information, and remain vigilant for any signs of suspicious activity.

What Is a Red Team Exercise & Why Should You Conduct One?

While no-one can predict if and when a cyber attack will take place, a red team exercise is as close as an organization can get to understanding its full level of preparedness. Red team exercises conducted by certified ethical hackers are key to uncovering hidden vulnerabilities and addressing them before they impact a company’s cyber resilience.

Patient Data Security in Healthcare Marketing: A Critical Necessity

Nowadays, patient engagement through online tools forms an important part of healthcare marketing. The use of digital channels to reach out to patients requires that patient data security be considered with the seriousness it deserves. Healthcare providers have access to critical personal information. Hence, protecting this data is a basic tenet that goes beyond just being a legal requirement. More so because trust between them and their patients has to be cemented.

Building Zero Trust Security: A Full Implementation Roadmap for Businesses

Today's digital is fast-moving, and businesses face many security threats. Hackers are constantly trying to steal data, with companies often overlooking internal weak spots. The traditional ways of protecting business systems and data don't work anymore. That's where Zero Trust Security comes into play-a fresh approach that says, "Don't trust anything or anyone, unless you can verify they're safe.".

Understanding NTLMv1, NTLMv2 and NTLMv2 Session Security Settings

NTLM has three versions - NTLMv1, NTLMv2 and NTLMv2 Session Security. NTLMv2 is supposed to offer better security than its previous version, and to some extent it does provides better defense against relay and brute force attacks, but does not completely block them. NTLMv2 Session Security is a session security protocol that can be used in conjunction with NTLMv1 or NTLMv2 to provide additional security.

Top 8 Challenges for CIOs and How to Deal With Them

The role of the сhief information officer (CIO) has transformed over the years, extending beyond traditional technical responsibilities. Currently, CIOs are facing numerous issues, such as widely distributed workforces, economic hurdles, and adopting cutting-edge technologies. In this article, we’ll cover these and other challenges facing CIOs today, and measures you can take to navigate them.

Building Trust in AI: Structured, Evidence-Backed Summaries for Seamless SOC Shift Transfers

Gal Peretz is Head of AI & Data at Torq. Gal accelerates Torq’s AI & Data initiatives, applying his vast expertise in deep learning and natural language processing to advance AI-powered security automation. He also co-hosts the LangTalks podcast, where he discusses the latest in AI and LLM technologies. Staying ahead of evolving cyber threats means more than just keeping up — it means outsmarting the adversary with intelligent, proactive solutions that supercharge your team.